This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/qJcccqDxWrdJegvnpo2s2Knlr7s.roa File: qJcccqDxWrdJegvnpo2s2Knlr7s.roa (raw, json) Hash identifier: PcVnyenRgB6ckra0K+D+gtKFqypcoJpDoAUxyPbLxQI= Subject key identifier: A8:97:1C:72:A0:F1:5A:B7:49:7A:0B:E7:A6:8D:AC:D8:A9:E5:AF:BB Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D57872BE2E274511CB02F3B05ABF Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/qJcccqDxWrdJegvnpo2s2Knlr7s.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48635 IP address blocks: 2.57.57.0/24 maxlen: 24 5.157.80.0/21 maxlen: 21 31.25.96.0/21 maxlen: 21 31.25.98.0/24 maxlen: 24 31.186.168.0/21 maxlen: 21 46.17.0.0/21 maxlen: 21 62.84.240.0/21 maxlen: 21 62.221.248.0/21 maxlen: 21 62.221.250.0/24 maxlen: 24 77.94.248.0/21 maxlen: 24 79.99.128.0/21 maxlen: 21 91.198.106.0/24 maxlen: 24 91.238.176.0/23 maxlen: 24 92.63.168.0/21 maxlen: 21 92.63.168.0/24 maxlen: 24 92.63.169.0/24 maxlen: 24 93.180.64.0/21 maxlen: 21 93.187.220.0/22 maxlen: 22 109.70.0.0/21 maxlen: 21 109.72.80.0/20 maxlen: 20 109.106.160.0/20 maxlen: 20 109.106.176.0/21 maxlen: 21 128.140.216.0/21 maxlen: 21 145.131.0.0/20 maxlen: 24 145.131.16.0/20 maxlen: 24 145.131.32.0/20 maxlen: 24 176.117.58.0/23 maxlen: 24 185.27.140.0/22 maxlen: 22 185.27.172.0/22 maxlen: 22 185.28.56.0/22 maxlen: 24 185.37.68.0/22 maxlen: 22 185.56.144.0/22 maxlen: 22 185.66.248.0/22 maxlen: 22 185.87.184.0/22 maxlen: 22 185.89.4.0/22 maxlen: 22 185.94.228.0/24 maxlen: 24 185.94.230.0/23 maxlen: 23 185.95.31.0/24 maxlen: 24 185.103.156.0/22 maxlen: 22 185.103.240.0/22 maxlen: 22 185.103.242.0/23 maxlen: 23 185.107.212.0/22 maxlen: 22 185.107.224.0/23 maxlen: 23 185.109.216.0/22 maxlen: 22 185.159.240.0/22 maxlen: 22 185.175.200.0/22 maxlen: 22 185.182.56.0/22 maxlen: 22 185.182.56.0/24 maxlen: 24 185.187.12.0/22 maxlen: 22 185.223.32.0/22 maxlen: 22 185.224.88.0/22 maxlen: 22 185.231.200.0/22 maxlen: 22 185.232.248.0/22 maxlen: 24 193.23.143.0/24 maxlen: 24 193.164.192.0/23 maxlen: 24 194.247.30.0/23 maxlen: 24 195.20.8.0/22 maxlen: 24 195.238.74.0/23 maxlen: 23 2001:678:76c::/48 maxlen: 48 2001:67c:28fc::/48 maxlen: 48 2a00:f10::/29 maxlen: 29 2a00:f60::/32 maxlen: 48 2a00:9b60::/40 maxlen: 48 2a01:b940::/29 maxlen: 29 2a02:2968::/29 maxlen: 29 2a02:40c1::/32 maxlen: 32 2a03:3060::/29 maxlen: 29 2a04:6bc0::/36 maxlen: 36 2a05:1500::/29 maxlen: 29 2a05:1500:600::/40 maxlen: 40 2a06:4040::/29 maxlen: 48 2a0b:7280::/29 maxlen: 29 2a0b:8f80::/29 maxlen: 29 2a0c:84c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d5:78:72:be:2e:27:45:11:cb:02:f3:b0:5a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8971c72a0f15ab7497a0be7a68dacd8a9e5afbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:7b:63:90:b0:1d:f2:f3:79:83:50:b8:ff: 98:6c:42:df:a4:28:f1:fe:42:16:40:b4:f9:37:01: a3:37:2d:7e:be:f9:53:e0:de:1c:1d:f7:5e:86:8b: 67:59:03:0c:19:97:a0:dd:da:c7:47:2c:85:a9:81: 4e:6e:4f:43:6c:23:dd:fb:1e:b0:6c:5a:ea:d0:3c: 83:6a:80:1f:b1:ce:7a:f1:ee:cc:21:ec:77:d3:8e: 67:dd:f0:3c:ab:23:21:6a:dd:49:bc:4e:47:c4:4d: 37:d9:18:6f:6d:82:1a:19:d4:cb:f2:cc:c6:ea:8d: 9f:53:09:80:e6:5b:10:08:ee:11:7c:33:ea:85:44: 27:9e:44:2f:76:a2:70:59:7f:68:ed:ba:28:f3:8b: 7b:07:95:1e:96:bb:eb:d9:fb:f2:0c:27:d3:d2:3e: 68:c5:18:0d:00:95:3b:6f:99:48:11:4a:ed:38:73: 04:ac:71:84:08:d8:6c:34:8a:b1:9a:1b:fd:cc:84: 6b:18:81:fd:6e:4a:78:40:a0:80:73:95:0e:71:0b: e0:5e:61:75:e9:6c:b0:46:ac:de:c3:d7:b6:68:c3: 4a:e6:6a:b3:b5:a3:bf:1b:5e:20:35:f7:88:74:1d: 2c:39:85:36:20:d3:0f:aa:d9:dc:e4:d1:07:4e:76: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:97:1C:72:A0:F1:5A:B7:49:7A:0B:E7:A6:8D:AC:D8:A9:E5:AF:BB X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/qJcccqDxWrdJegvnpo2s2Knlr7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.57.0/24 5.157.80.0/21 31.25.96.0/21 31.186.168.0/21 46.17.0.0/21 62.84.240.0/21 62.221.248.0/21 77.94.248.0/21 79.99.128.0/21 91.198.106.0/24 91.238.176.0/23 92.63.168.0/21 93.180.64.0/21 93.187.220.0/22 109.70.0.0/21 109.72.80.0/20 109.106.160.0-109.106.183.255 128.140.216.0/21 145.131.0.0-145.131.47.255 176.117.58.0/23 185.27.140.0/22 185.27.172.0/22 185.28.56.0/22 185.37.68.0/22 185.56.144.0/22 185.66.248.0/22 185.87.184.0/22 185.89.4.0/22 185.94.228.0/24 185.94.230.0/23 185.95.31.0/24 185.103.156.0/22 185.103.240.0/22 185.107.212.0/22 185.107.224.0/23 185.109.216.0/22 185.159.240.0/22 185.175.200.0/22 185.182.56.0/22 185.187.12.0/22 185.223.32.0/22 185.224.88.0/22 185.231.200.0/22 185.232.248.0/22 193.23.143.0/24 193.164.192.0/23 194.247.30.0/23 195.20.8.0/22 195.238.74.0/23 IPv6: 2001:678:76c::/48 2001:67c:28fc::/48 2a00:f10::/29 2a00:f60::/32 2a00:9b60::/40 2a01:b940::/29 2a02:2968::/29 2a02:40c1::/32 2a03:3060::/29 2a04:6bc0::/36 2a05:1500::/29 2a06:4040::/29 2a0b:7280::/29 2a0b:8f80::/29 2a0c:84c0::/29 Signature Algorithm: sha256WithRSAEncryption 31:6a:93:be:a0:a5:78:dc:10:c3:76:9e:6c:93:a0:cd:af:89: 84:2d:ea:78:22:32:6b:10:d4:66:e7:a7:a7:7b:23:be:4d:1f: 34:4f:30:de:ce:aa:9f:ed:f0:53:42:c5:0f:75:9d:ee:b7:d9: a5:a8:49:22:e4:a8:7c:1b:37:05:48:ac:36:6e:09:30:c4:6b: 84:7f:ff:c9:c3:e2:e6:85:aa:25:fa:8a:2c:78:e5:81:ac:b6: 63:0d:2a:c4:65:00:62:eb:27:e3:59:df:35:23:67:b1:4e:d8: 79:96:03:c2:7d:ab:48:3b:9f:04:56:b9:20:dd:59:35:e9:f9: d3:5e:69:c9:6c:24:00:38:b1:ae:f3:74:ba:bf:9d:b6:c5:b8: 52:cd:6f:22:c6:8c:bb:07:98:a9:f9:3c:98:c3:83:31:5c:81: 37:08:74:80:4b:36:d8:81:ec:f2:ed:a5:1e:f9:21:94:ab:dd: 19:58:5b:20:5b:71:2a:af:36:ab:0e:41:5d:c1:51:9d:af:50: 61:90:43:65:89:2a:fc:00:00:7b:c9:bb:9b:94:78:15:7a:ba: 61:1a:03:99:d1:2f:a0:04:6b:03:4f:ec:27:22:c1:92:88:3c: 7c:07:ce:29:b7:be:05:58:78:ac:62:f2:d0:44:b3:7a:1d:44: 42:54:06:23 -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgISAZt/gNV4cr4uJ0URywLzsFq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODk3MWM3MmEwZjE1YWI3NDk3YTBiZTdhNjhkYWNkOGE5ZTVhZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOV7Y5CwHfLzeYNQuP+YbELfpCjx /kIWQLT5NwGjNy1+vvlT4N4cHfdehotnWQMMGZeg3drHRyyFqYFObk9DbCPd+x6w bFrq0DyDaoAfsc568e7MIex3045n3fA8qyMhat1JvE5HxE032RhvbYIaGdTL8szG 6o2fUwmA5lsQCO4RfDPqhUQnnkQvdqJwWX9o7boo84t7B5Uelrvr2fvyDCfT0j5o xRgNAJU7b5lIEUrtOHMErHGECNhsNIqxmhv9zIRrGIH9bkp4QKCAc5UOcQvgXmF1 6WywRqzew9e2aMNK5mqztaO/G14gNfeIdB0sOYU2INMPqtnc5NEHTnaPDwIDAQAB o4IDuTCCA7UwHQYDVR0OBBYEFKiXHHKg8Vq3SXoL56aNrNip5a+7MB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvcUpjY2NxRHhXcmRKZWd2bnBvMnMyS25scjdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBzQYIKwYBBQUHAQcBAf8EggG8MIIBuDCCAT0EAgABMIIB NQMEAAI5OQMEAwWdUAMEAx8ZYAMEAx+6qAMEAy4RAAMEAz5U8AMEAz7d+AMEA01e +AMEA09jgAMEAFvGagMEAVvusAMEA1w/qAMEA120QAMEAl273AMEA21GAAMEBG1I UDAMAwQFbWqgAwQDbWqwAwQDgIzYMAsDAwCRgwMEBJGDIAMEAbB1OgMEArkbjAME ArkbrAMEArkcOAMEArklRAMEArk4kAMEArlC+AMEArlXuAMEArlZBAMEALle5AME Able5gMEALlfHwMEArlnnAMEArln8AMEArlr1AMEAblr4AMEArlt2AMEArmf8AME ArmvyAMEArm2OAMEArm7DAMEArnfIAMEArngWAMEArnnyAMEArno+AMEAMEXjwME AcGkwAMEAcL3HgMEAsMUCAMEAcPuSjB1BAIAAjBvAwcAIAEGeAdsAwcAIAEGfCj8 AwUDKgAPEAMFACoAD2ADBgAqAJtgAAMFAyoBuUADBQMqAiloAwUAKgJAwQMFAyoD MGADBgQqBGvAAAMFAyoFFQADBQMqBkBAAwUDKgtygAMFAyoLj4ADBQMqDITAMA0G CSqGSIb3DQEBCwUAA4IBAQAxapO+oKV43BDDdp5sk6DNr4mELep4IjJrENRm56en eyO+TR80TzDezqqf7fBTQsUPdZ3ut9mlqEki5Kh8GzcFSKw2bgkwxGuEf//Jw+Lm haol+ooseOWBrLZjDSrEZQBi6yfjWd81I2exTth5lgPCfatIO58EVrkg3Vk16fnT XmnJbCQAOLGu83S6v522xbhSzW8ixoy7B5ip+TyYw4MxXIE3CHSASzbYgezy7aUe +SGUq90ZWFsgW3EqrzarDkFdwVGdr1BhkENliSr8AAB7ybublHgVerphGgOZ0S+g BGsDT+wnIsGSiDx8B84pt74FWHisYvLQRLN6HURCVAYj -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:29 2026 by rpki-client